Given the ports you have listed, this looks more like a worm than a hack attack. Most likely Mydoom or one of it's variants. If Zonealarm is blocking it, I wouldn't worry about it.

Cheers: